Soc Analyst at a media company with 501-1,000 employees
Real User
Top 10
Jun 26, 2026
The main use case for Alert Logic MDR in our organization is using it for endpoint detection and response as an endpoint detection system to secure our endpoints and systems, along with our clients who are securing their endpoint detection. Whenever an alert comes to Alert Logic MDR, we download Alert Logic MDR to the endpoint of the customer in our organization. When the laptop endpoint is online and a malicious or suspicious event happens, such as a pop-up or a malware attack, we directly receive the alert on Alert Logic MDR. As a 24/7 monitoring team, we perform some basic analysis, static analysis, and raise that alert to the team.
Solutions Architect at a tech vendor with 10,001+ employees
Real User
Top 5
Jun 22, 2026
My main use case for Alert Logic MDR was investigating all cloud assets and generating alerts when issues or attacks were detected, whether DDoS attacks or other kinds of security attacks. Alert Logic MDR was detecting and identifying where attacks were originating. I recall a previous instance when there were numerous attacks coming from one particular country using different IPs. Those were Chinese IPs, and when checked on VirusTotal and other sites, they were blacklisted. We put a firewall rule and placed all of them in blacklist mode for those IPs.
Security Analyst at a consultancy with 10,001+ employees
Real User
Top 5
May 10, 2026
Our client selected Alert Logic for the Voluntary Management model. We used it for return parameter management three sixty. Our team, consisting of around four to five members, along with two or three members from the client, used the TVM Model or the preprocessing management model. The client also set up a physical appliance in their environment, although I am not certain whether maintaining it was the responsibility of Alert Logic team or our client.
We have configured multiple scenario-based alerts for Cybereason Managed Detection & Response, such as known malware, potential unwanted programs, and PowerShell execution. We monitor suspicious activities and take action based on the priority of these alerts. We work with Cybereason to implement new features and ensure protection and exploit prevention.
System Analyst at a tech services company with 11-50 employees
Real User
Top 10
Feb 27, 2025
We use Cybereason Managed Detection & Response for general security and monitoring of our environment. This includes threat detection and response to ensure we are aware of threats that are in our environment.
I am part of a reseller with two roles. We are a Managed Service Provider ourselves, and in a way, we compete with managed detection and response with the MDR product. In our managed service, we use the NGAV product and mainly the EDR product to provide our service. In some situations, we resell all three products or even four. We resell NGAV and EDR to customers who want to run it on their own, and we resell these products, including MDR, with a managed service from Cybereason, where the customer prefers that. When we sell the XDR product, MDR is always included. This depends on the customer situation. We resell MDR when the customer is price-sensitive and needs real 24/7 service. The Cybereason model is more economical than ours. We are more flexible but more expensive.
Learn what your peers think about LevelBlue Managed Detection and Response. Get advice and tips from experienced pros sharing their opinions. Updated: October 2026.
Head of Research Development and Innovation at CSIR
Real User
Top 10
Aug 21, 2023
My company uses Cybereason Managed Detection & Response for incident response, and whenever there is a breach, we support some clients. In short, we also manage it for our company's clients.
Alert Logic MDR provides robust 24/7 threat detection and response, leveraging AI and behavior analysis to offer organizations comprehensive protection with minimal system impact.
Alert Logic MDR is a managed detection and response service optimized for detecting cyber threats with global visibility. It integrates with ticketing tools and enhances investigative capabilities. Organizations benefit from its efficient alert system and proactive security measures, although it seeks improvements...
The main use case for Alert Logic MDR in our organization is using it for endpoint detection and response as an endpoint detection system to secure our endpoints and systems, along with our clients who are securing their endpoint detection. Whenever an alert comes to Alert Logic MDR, we download Alert Logic MDR to the endpoint of the customer in our organization. When the laptop endpoint is online and a malicious or suspicious event happens, such as a pop-up or a malware attack, we directly receive the alert on Alert Logic MDR. As a 24/7 monitoring team, we perform some basic analysis, static analysis, and raise that alert to the team.
My main use case for Alert Logic MDR was investigating all cloud assets and generating alerts when issues or attacks were detected, whether DDoS attacks or other kinds of security attacks. Alert Logic MDR was detecting and identifying where attacks were originating. I recall a previous instance when there were numerous attacks coming from one particular country using different IPs. Those were Chinese IPs, and when checked on VirusTotal and other sites, they were blacklisted. We put a firewall rule and placed all of them in blacklist mode for those IPs.
Our client selected Alert Logic for the Voluntary Management model. We used it for return parameter management three sixty. Our team, consisting of around four to five members, along with two or three members from the client, used the TVM Model or the preprocessing management model. The client also set up a physical appliance in their environment, although I am not certain whether maintaining it was the responsibility of Alert Logic team or our client.
We have configured multiple scenario-based alerts for Cybereason Managed Detection & Response, such as known malware, potential unwanted programs, and PowerShell execution. We monitor suspicious activities and take action based on the priority of these alerts. We work with Cybereason to implement new features and ensure protection and exploit prevention.
We use Cybereason Managed Detection & Response for general security and monitoring of our environment. This includes threat detection and response to ensure we are aware of threats that are in our environment.
I am part of a reseller with two roles. We are a Managed Service Provider ourselves, and in a way, we compete with managed detection and response with the MDR product. In our managed service, we use the NGAV product and mainly the EDR product to provide our service. In some situations, we resell all three products or even four. We resell NGAV and EDR to customers who want to run it on their own, and we resell these products, including MDR, with a managed service from Cybereason, where the customer prefers that. When we sell the XDR product, MDR is always included. This depends on the customer situation. We resell MDR when the customer is price-sensitive and needs real 24/7 service. The Cybereason model is more economical than ours. We are more flexible but more expensive.
My company uses Cybereason Managed Detection & Response for incident response, and whenever there is a breach, we support some clients. In short, we also manage it for our company's clients.